@pulumi/pulumi 3.201.0

Pulumi's Node.js SDK

@pulumi/pulumi@3.201.0 was published on 2025-10-06. Its manifest declares 28 runtime dependencies and 2 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=20.

All @pulumi/pulumi versions · Permanent reference to 3.201.0 · Latest release

Package specifications

Version	3.201.0
License declaration	Apache-2.0
Published	2025-10-06T15:49:15.098Z
Node.js requirement	>=20
Type declarations	Bundled declarations
Runtime dependency count	28
Peer requirement count	2
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	14089.33 KiB
Published file count	359
Package type	Not declared
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	281
Repository stars	25805
Repository forks	1462

Install @pulumi/pulumi 3.201.0

npm install @pulumi/pulumi@3.201.0
pnpm add @pulumi/pulumi@3.201.0
yarn add @pulumi/pulumi@3.201.0

Runtime dependencies

got ^11.8.6
ini ^2.0.0
tmp ^0.2.4
fdir ^6.1.1
execa ^5.1.0
upath ^1.1.0
semver ^7.5.2
js-yaml ^3.14.0
pkg-dir ^7.0.0
minimist ^1.2.6
picomatch ^3.0.1
@types/tmp ^0.2.6
@grpc/grpc-js ^1.10.1
@types/semver ^7.5.6
google-protobuf ^3.21.4
@npmcli/arborist ^7.3.1
@logdna/tail-file ^2.0.6
@opentelemetry/api ^1.9
source-map-support ^0.5.6
require-from-string ^2.0.1
@types/google-protobuf ^3.15.5
normalize-package-data ^6.0.0
@opentelemetry/resources ^1.28
@opentelemetry/sdk-trace-base ^1.28
@opentelemetry/sdk-trace-node ^1.28
@opentelemetry/exporter-zipkin ^1.28
@opentelemetry/instrumentation ^0.55
@opentelemetry/instrumentation-grpc ^0.55

Peer requirements

ts-node >= 7.0.1 < 12 (optional peer)
typescript >= 3.8.3 < 6 (optional peer)

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@grpc/grpc-js@1.14.6 — direct
@logdna/tail-file@2.2.0 — direct
@npmcli/arborist@7.5.4 — direct
@opentelemetry/api@1.10.0 — direct
@opentelemetry/exporter-zipkin@1.30.1 — direct
@opentelemetry/instrumentation@0.55.0 — direct
@opentelemetry/instrumentation-grpc@0.55.0 — direct
@opentelemetry/resources@1.30.1 — direct
@opentelemetry/sdk-trace-base@1.30.1 — direct
@opentelemetry/sdk-trace-node@1.30.1 — direct
@types/google-protobuf@3.15.12 — direct
@types/semver@7.8.0 — direct
@types/tmp@0.2.6 — direct
execa@5.1.1 — direct
fdir@6.5.0 — direct
google-protobuf@3.21.4 — direct
got@11.8.6 — direct
ini@2.0.0 — direct
js-yaml@3.15.2 — direct
minimist@1.2.8 — direct
normalize-package-data@6.0.2 — direct
picomatch@3.0.2 — direct
pkg-dir@7.0.0 — direct
require-from-string@2.0.2 — direct
semver@7.8.5 — direct
source-map-support@0.5.21 — direct
tmp@0.2.7 — direct
upath@1.2.0 — direct
@grpc/proto-loader@0.8.1 — indirect
@js-sdsl/ordered-map@4.4.2 — indirect
@isaacs/string-locale-compare@1.1.0 — indirect
@npmcli/fs@3.1.1 — indirect
@npmcli/installed-package-contents@2.1.0 — indirect
@npmcli/map-workspaces@3.0.6 — indirect
@npmcli/metavuln-calculator@7.1.1 — indirect
@npmcli/name-from-folder@2.0.0 — indirect
@npmcli/node-gyp@3.0.0 — indirect
@npmcli/package-json@5.2.1 — indirect
@npmcli/query@3.1.0 — indirect
@npmcli/redact@2.0.1 — indirect
@npmcli/run-script@8.1.0 — indirect
bin-links@4.0.4 — indirect
cacache@18.0.4 — indirect
common-ancestor-path@1.0.1 — indirect
hosted-git-info@7.0.2 — indirect
json-parse-even-better-errors@3.0.2 — indirect
json-stringify-nice@1.1.4 — indirect
lru-cache@10.4.3 — indirect
minimatch@9.0.9 — indirect
nopt@7.2.1 — indirect
npm-install-checks@6.3.0 — indirect
npm-package-arg@11.0.3 — indirect
npm-pick-manifest@9.1.0 — indirect
npm-registry-fetch@17.1.0 — indirect
pacote@18.0.6 — indirect
parse-conflict-json@3.0.1 — indirect
proc-log@4.2.0 — indirect
proggy@2.0.0 — indirect
promise-all-reject-late@1.0.1 — indirect
promise-call-limit@3.0.2 — indirect
read-package-json-fast@3.0.2 — indirect
ssri@10.0.6 — indirect
treeverse@3.0.0 — indirect
walk-up-path@3.0.1 — indirect
@opentelemetry/core@1.30.1 — indirect
@opentelemetry/semantic-conventions@1.28.0 — indirect
@opentelemetry/api-logs@0.55.0 — indirect
@types/shimmer@1.2.0 — indirect
import-in-the-middle@1.15.0 — indirect
require-in-the-middle@7.5.2 — indirect
shimmer@1.2.1 — indirect
@opentelemetry/semantic-conventions@1.27.0 — indirect
@opentelemetry/context-async-hooks@1.30.1 — indirect
@opentelemetry/propagator-b3@1.30.1 — indirect
@opentelemetry/propagator-jaeger@1.30.1 — indirect
cross-spawn@7.0.6 — indirect
get-stream@6.0.1 — indirect
human-signals@2.1.0 — indirect
is-stream@2.0.1 — indirect
merge-stream@2.0.0 — indirect
npm-run-path@4.0.1 — indirect
onetime@5.1.2 — indirect
signal-exit@3.0.7 — indirect
strip-final-newline@2.0.0 — indirect
@sindresorhus/is@4.6.0 — indirect
@szmarczak/http-timer@4.0.6 — indirect
@types/cacheable-request@6.0.3 — indirect
@types/responselike@1.0.3 — indirect
cacheable-lookup@5.0.4 — indirect
cacheable-request@7.0.4 — indirect
decompress-response@6.0.0 — indirect
http2-wrapper@1.0.3 — indirect
lowercase-keys@2.0.0 — indirect
p-cancelable@2.1.1 — indirect
responselike@2.0.1 — indirect
argparse@1.0.10 — indirect
esprima@4.0.1 — indirect
validate-npm-package-license@3.0.4 — indirect
find-up@6.3.0 — indirect
buffer-from@1.1.2 — indirect
source-map@0.6.1 — indirect
lodash.camelcase@4.3.0 — indirect
long@5.3.2 — indirect
protobufjs@7.6.6 — indirect
yargs@17.7.3 — indirect
npm-bundled@3.0.1 — indirect
npm-normalize-package-bin@3.0.1 — indirect
glob@10.5.0 — indirect
@npmcli/git@5.0.8 — indirect
postcss-selector-parser@6.1.5 — indirect
@npmcli/promise-spawn@7.0.2 — indirect
node-gyp@10.3.1 — indirect
which@4.0.0 — indirect
cmd-shim@6.0.3 — indirect
read-cmd-shim@4.0.0 — indirect
write-file-atomic@5.0.1 — indirect
fs-minipass@3.0.3 — indirect
minipass@7.1.3 — indirect
minipass-collect@2.0.1 — indirect
minipass-flush@1.0.7 — indirect
minipass-pipeline@1.2.4 — indirect
p-map@4.0.0 — indirect
tar@6.2.1 — indirect
unique-filename@3.0.0 — indirect
brace-expansion@2.1.7 — indirect
abbrev@2.0.0 — indirect
validate-npm-package-name@5.0.1 — indirect
jsonparse@1.3.1 — indirect
make-fetch-happen@13.0.1 — indirect
minipass-fetch@3.0.5 — indirect
minizlib@2.1.2 — indirect
npm-packlist@8.0.2 — indirect
promise-retry@2.0.1 — indirect
sigstore@2.3.1 — indirect
just-diff@6.0.2 — indirect
just-diff-apply@5.5.0 — indirect
acorn@8.19.0 — indirect
acorn-import-attributes@1.9.5 — indirect
cjs-module-lexer@1.4.3 — indirect
module-details-from-path@1.0.4 — indirect
debug@4.4.3 — indirect
resolve@1.22.13 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
mimic-fn@2.1.0 — indirect
defer-to-connect@2.0.1 — indirect
@types/http-cache-semantics@4.2.0 — indirect
@types/keyv@3.1.4 — indirect
@types/node@26.6.6 — indirect
clone-response@1.0.3 — indirect
get-stream@5.2.0 — indirect
http-cache-semantics@4.3.0 — indirect
keyv@4.5.4 — indirect
normalize-url@6.1.0 — indirect
mimic-response@3.1.0 — indirect
quick-lru@5.1.1 — indirect
resolve-alpn@1.2.1 — indirect
sprintf-js@1.0.3 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
locate-path@7.2.0 — indirect
path-exists@5.0.0 — indirect
@protobufjs/aspromise@1.1.2 — indirect
@protobufjs/base64@1.1.2 — indirect
@protobufjs/codegen@2.0.5 — indirect
@protobufjs/eventemitter@1.1.1 — indirect
@protobufjs/fetch@1.1.1 — indirect
@protobufjs/float@1.0.2 — indirect
@protobufjs/path@1.1.2 — indirect
@protobufjs/pool@1.1.0 — indirect
@protobufjs/utf8@1.1.2 — indirect
cliui@8.0.1 — indirect
escalade@3.2.0 — indirect
get-caller-file@2.0.5 — indirect
require-directory@2.1.1 — indirect
string-width@4.2.3 — indirect
y18n@5.0.8 — indirect
yargs-parser@21.1.1 — indirect
foreground-child@3.3.1 — indirect
jackspeak@3.4.3 — indirect
package-json-from-dist@1.0.1 — indirect
path-scurry@1.11.1 — indirect
ini@4.1.3 — indirect
promise-inflight@1.0.1 — indirect
which@4.0.0 — indirect
cssesc@3.0.0 — indirect
util-deprecate@1.0.2 — indirect
which@4.0.0 — indirect
env-paths@2.2.1 — indirect
exponential-backoff@3.1.3 — indirect
graceful-fs@4.2.11 — indirect
which@4.0.0 — indirect
isexe@3.1.5 — indirect
imurmurhash@0.1.4 — indirect
signal-exit@4.1.0 — indirect
minipass@3.3.6 — indirect
minipass@3.3.6 — indirect
aggregate-error@3.1.0 — indirect
chownr@2.0.0 — indirect
fs-minipass@2.1.0 — indirect
minipass@5.0.0 — indirect
mkdirp@1.0.4 — indirect
yallist@4.0.0 — indirect
unique-slug@4.0.0 — indirect
balanced-match@1.0.2 — indirect
@npmcli/agent@2.2.2 — indirect
is-lambda@1.0.1 — indirect
negotiator@0.6.4 — indirect
encoding@0.1.14 — indirect
minipass-sized@1.0.3 — indirect
minipass@3.3.6 — indirect
ignore-walk@6.0.5 — indirect
err-code@2.0.3 — indirect
retry@0.12.0 — indirect
@sigstore/bundle@2.3.2 — indirect
@sigstore/core@1.1.0 — indirect
@sigstore/protobuf-specs@0.3.3 — indirect
@sigstore/sign@2.3.2 — indirect
@sigstore/tuf@2.3.4 — indirect
@sigstore/verify@1.2.1 — indirect
ms@2.1.3 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
shebang-regex@3.0.0 — indirect
isexe@2.0.0 — indirect
undici-types@8.9.0 — indirect
mimic-response@1.0.1 — indirect
pump@3.0.4 — indirect
json-buffer@3.0.1 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
p-locate@6.0.0 — indirect
strip-ansi@6.0.1 — indirect
wrap-ansi@7.0.0 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
@isaacs/cliui@8.0.2 — indirect
@pkgjs/parseargs@0.11.0 — indirect
isexe@3.1.5 — indirect
isexe@3.1.5 — indirect
isexe@3.1.5 — indirect
clean-stack@2.2.0 — indirect
indent-string@4.0.0 — indirect
minipass@3.3.6 — indirect
agent-base@7.1.4 — indirect
http-proxy-agent@7.0.2 — indirect
https-proxy-agent@7.0.6 — indirect
socks-proxy-agent@8.0.5 — indirect
iconv-lite@0.7.3 — indirect
minipass@3.3.6 — indirect
tuf-js@2.2.1 — indirect
hasown@2.0.4 — indirect
end-of-stream@1.4.5 — indirect
once@1.4.0 — indirect
p-limit@4.0.0 — indirect
ansi-regex@5.0.1 — indirect
ansi-styles@4.3.0 — indirect
string-width@4.2.3 — indirect
string-width@5.1.2 — indirect
strip-ansi@6.0.1 — indirect
strip-ansi@7.2.0 — indirect
wrap-ansi@7.0.0 — indirect
wrap-ansi@8.1.0 — indirect
socks@2.8.10 — indirect
safer-buffer@2.1.2 — indirect
@tufjs/models@2.0.1 — indirect
function-bind@1.1.2 — indirect
wrappy@1.0.2 — indirect
yocto-queue@1.2.2 — indirect
color-convert@2.0.1 — indirect
eastasianwidth@0.2.0 — indirect
emoji-regex@9.2.2 — indirect
ansi-regex@6.4.0 — indirect
ansi-styles@6.2.3 — indirect
ip-address@10.7.5 — indirect
smart-buffer@4.2.0 — indirect
@tufjs/canonical-json@2.0.0 — indirect
color-name@1.1.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Code-Review	10/10 — all changesets reviewed
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
License	10/10 — license file detected
Security-Policy	10/10 — security policy file detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Signed-Releases	8/10 — 5 out of the last 5 releases have a total of 5 signed artifacts.
Binary-Artifacts	9/10 — binaries present in source code
Pinned-Dependencies	4/10 — dependency not pinned by hash detected -- score normalized to 4
Fuzzing	10/10 — project is fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/%40pulumi%2Fpulumi/3.201.0 — retrieved 2026-10-30T06:01:26.679Z
https://api.deps.dev/v3/projects/github.com%2Fpulumi%2Fpulumi — retrieved 2026-10-30T03:21:04.806Z
https://api.deps.dev/v3/systems/npm/packages/%40pulumi%2Fpulumi/versions/3.201.0:dependencies — retrieved 2026-10-30T06:01:27.352Z
https://api.deps.dev/v3/systems/npm/packages/%40pulumi%2Fpulumi/versions/3.201.0 — retrieved 2026-10-30T06:01:27.302Z